Information disclosure

HTMLTokenizer::scriptHandler in Konqueror in KDE 3.5.9 and 3.5.10 allows remote attackers to cause a denial of service application crash via an invalid document.load call that triggers use of a deleted object. NOTE: some of these details are obtained from third party information...

CVE-2008-5698

CVE-2008-5698 affects Konqueror (KDE 3.5.9 and 3.5.10). The vulnerability is described as a denial of service caused by an invalid document.load call that triggers use of a deleted object in HTMLTokenizer::scriptHandler. The issue is a remote-triggered crash and is linked to the use of a deleted ...

[SECURITY] Fedora 8 Update: ktorrent-2.2.7-2.fc8

KTorrent is a BitTorrent program for KDE. Its main features are native KDE integration, download of torrent files, upload speed capping, internet searching using various search engines, UDP Trackers and UPnP support...

[SECURITY] Fedora 9 Update: ktorrent-3.1.4-1.fc9

KTorrent is a BitTorrent program for KDE. Its main features are native KDE integration, download of torrent files, upload speed capping, internet searching using various search engines, UDP Trackers and UPnP support...

KDE Konqueror 3.5.9 - JavaScript 'load' Denial of Service

source: https://www.securityfocus.com/bid/31696/info KDE Konqueror is prone to a remote denial-of-service vulnerability because it fails to handle specially crafted JavaScript code. An attacker may exploit this vulnerability to cause Konqueror to crash, resulting in denial-of-service conditions...

KDE Konqueror 3.5.9 - JavaScript load Denial of Service

KDE Konqueror 3.5.9 - JavaScript load Denial of Service source: https://www.securityfocus.com/bid/31696/info KDE Konqueror is prone to a remote denial-of-service vulnerability because it fails to handle specially crafted JavaScript code. An attacker may exploit this vulnerability to cause Konquer...

CVE-2008-4514

The HTML parser in KDE Konqueror 3.5.9 allows remote attackers to cause a denial of service application crash via a font tag with a long color value, which triggers an assertion error...

CVE-2008-4514

The HTML parser in KDE Konqueror 3.5.9 allows remote attackers to cause a denial of service application crash via a font tag with a long color value, which triggers an assertion error...

CVE-2008-4514

The CVE-2008-4514 entry covers a Denial of Service in KDE Konqueror 3.5.9’s HTML parser, triggered by a font tag with an excessively long color value that leads to an assertion error and application crash. Related disclosures (CVE-2008-5712) describe the same DoS condition via long COLOR attribut...

konqueror-crash.txt

KDE's Konqueror & Color Attribute Love perl -e 'print "\n" . "\n"' kdie.html perl -e 'print "\n" . "\n"' kdie2.html perl -e 'print "\n" . "\n"' kdie3.html KDE's Konqueror & Color Attribute Love perl -e 'print "\n" . "\n"' kdie.html perl -e 'print "\n" . "\n"' kdie2.html perl -e 'print "\n" . "\n"...

Konqueror 3.5.9 (color/bgcolor) Multiple Remote Crash Vulnerabilities

No description provided by source. KDE's Konqueror & Color Attribute Love perl -e 'print "html\n" . "font color=" . "A" x 500000 . "\n/html"' kdie.html perl -e 'print "html\n" . "hr color=" . "A" x 500000 . "\n/html"' kdie2.html perl -e 'print "html\n" . "table bgcolor=" . "A" x 500000 . "\n/html...

KDE Konqueror字体颜色'断言'拒绝服务漏洞

BUGTRAQ ID: 31605 CNCAN ID：CNCAN-2008100805 Konqueror是一款桌面环境的文件管理器，也可用于浏览WEB。 Konqueror处理特殊构建的HMTL 'font'标签，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 构建特殊的WEB页，诱使Konqueror处理可导致应用程序崩溃。 KDE Konqueror 3.5.9 目前没有解决方案提供： http://www.konqueror.org/ perl -e 'print "html\n" . "font color=" . "A" x 500000 . "\n/html"'...

Konqueror 3.5.9 (font color) Remote Crash Vulnerability

Exploit for linux platform in category dos / poc ======================================================= Konqueror 3.5.9 font color Remote Crash Vulnerability ======================================================= Konqueror isn't immune from fuzzing either Konqueror, KDE's mighty mascot browser...

CVE-2008-4382

Konqueror in KDE 3.5.9 allows remote attackers to cause a denial of service application crash via Javascript that calls the alert function with a URL-encoded string of a large number of invalid characters...

CVE-2008-4382

Affected software: Konqueror in KDE 3.5.9. The vulnerability is triggered by JavaScript calling alert() with a URL-encoded string containing a large number of invalid characters, leading to an application crash (DoS). The supplied documents do not provide a specific patch/version for remediation....

Gentoo Security Advisory GLSA 200504-22 (KDE)

The remote host is missing updates announced in advisory GLSA 200504-22. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200412-16 (KDE)

The remote host is missing updates announced in advisory GLSA 200412-16. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200404-02 (kde-base/kde)

The remote host is missing updates announced in advisory GLSA 200404-02. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200701-26 (ksirc)

The remote host is missing updates announced in advisory GLSA 200701-26. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200412-17 (kfax)

The remote host is missing updates announced in advisory GLSA 200412-17. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...